Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

tl;dr: This software immediately recognized Shellshock for what it was, modified live processes to protect itself, then wrote a patch and re-compiled bash in a few minutes... all with a single malicious request.

This sounds like science fiction. I love it.



I have to be honest; at first I genuinely thought it was science fiction. It sounded like a William Gibson novel.


Note that it disabled the exploit instead of fixing it, which still is a remarkable feat. I wonder if that could be exploited e.g. by exposing an light exploit from security feature you trick the software to disable a security feature that was stopping a more dangerous exploit, a la The Prefect by Alastair Reynolds.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: